October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116256 A vulnerability was found in geesondog RhaPHP up to 7ae639ccf8dcb627faace096d030... |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116257 A vulnerability was determined in BillaBear up to 2025.01.03. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-115608 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-115948 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116237 A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. |
high | 8.4 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116253 A vulnerability was determined in DedeCMS 5.7.118. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-82944 SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data tr... |
high | 8.8 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-82947 SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame proces... |
high | 7.1 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116236 A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. |
high | 7.2 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-70388 SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device... |
high | 8.3 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-111841 Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116230 A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24... |
high | 7.8 | — | Ndemiccreations / plague inc evolved | 2026-10-26 | 2026-10-31 |
| CVE-2026-107899 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107900 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107894 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107895 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107896 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107897 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107898 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116117 A flaw has been found in halo-dev halo up to 2.27.0-beta.1. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116116 A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. |
high | 8.2 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116110 A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. |
high | 7.3 | — | — | 2026-10-26 | 2026-11-02 |
| CVE-2026-116112 A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up... |
high | 7.3 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116106 A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116098 A vulnerability was detected in SteelRaven7 Ravenfield 25407073. |
high | 7.8 | — | Steelraven7 / ravenfield | 2026-10-26 | 2026-10-29 |
| CVE-2026-116099 A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplay... |
high | 8.8 | — | Fcs-ex / scp\ | 2026-10-26 | 2026-10-29 |
| CVE-2026-116094 A vulnerability was determined in EyouCMS up to 1.8.3. |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116061 A vulnerability was identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116062 A security flaw has been discovered in SourceCodester Performance Indicator Syst... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116060 A vulnerability was determined in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex... |
high | 7.5 | — | — | 2026-10-25 | 2026-11-02 |
| CVE-2026-115824 Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded bu... |
high | 7.5 | — | — | 2026-10-25 | 2026-11-02 |
| CVE-2026-115825 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to cra... |
high | 7.5 | — | — | 2026-10-25 | 2026-11-02 |
| CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a w... |
high | 7.5 | — | — | 2026-10-25 | 2026-11-02 |
| CVE-2026-116208 YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability i... |
high | 8.1 | — | — | 2026-10-25 | 2026-11-03 |
| CVE-2026-116211 YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManage... |
high | 8.2 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116204 YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the... |
high | 8.1 | — | — | 2026-10-25 | 2026-11-03 |
| CVE-2026-116199 Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:... |
high | 8.1 | — | Snipeitapp / snipe-it | 2026-10-25 | 2026-10-26 |
| CVE-2026-116201 Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows... |
high | 8.8 | — | Snipeitapp / snipe-it | 2026-10-25 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.